Vulners
Lucene search
CVE-2026-5172
🗓️ 11 May 2026 16:48:46Reported by certccType 
cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 24 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 65 |
|---|---|---|---|---|
 | Exploit for CVE-2026-5172 | 27 May 202605:49 | – | githubexploit |
 | CVE-2026-5172 | 11 May 202616:48 | – | attackerkb |
 | Amazon Linux 2023 : dnsmasq, dnsmasq-utils (ALAS2023-2026-1729) | 26 May 202600:00 | – | nessus |
| Amazon Linux 2 : dnsmasq, --advisory ALAS2DNSMASQ-2026-004 (ALASDNSMASQ-2026-004) | 27 May 202600:00 | – | nessus |
| Debian dsa-6264 : dnsmasq - security update | 11 May 202600:00 | – | nessus |
| Fedora 43 : dnsmasq (2026-6384a3cf14) | 19 May 202600:00 | – | nessus |
| Fedora 44 : dnsmasq (2026-ac5cceec13) | 15 May 202600:00 | – | nessus |
| FreeBSD : dnsmasq -- multiple vulnerabilities (eeb4d69a-4d74-11f1-9a9c-994b98c88011) | 12 May 202600:00 | – | nessus |
| Photon OS 4.0: Dnsmasq PHSA-2026-4.0-1023 | 26 May 202600:00 | – | nessus |
| RHEL 10 : dnsmasq (RHSA-2026:19158) | 19 May 202600:00 | – | nessus |
10
[
{
"vendor": "dnsmasq",
"product": "dnsmasq",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.92rel2",
"versionType": "custom"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| rdlen | binary | 127.0.0.1:5354 | DNS server (dnsmasq) on port 5354 vulnerability vector used in PoC to trigger buffer overflow via crafted DNS response | CWE-119 |
| malformed DNS response | binary | 127.0.0.1:5354 | DNS server (dnsmasq) on port 5354 vulnerability vector used in PoC to trigger buffer overflow via crafted DNS response | CWE-119 |
| count | binary | 127.0.0.1:5353 | DNS client interaction in PoC to trigger the server-side buffer overflow when processing crafted responses | CWE-119 |
| timeout | binary | 127.0.0.1:5353 | DNS client interaction in PoC to trigger the server-side buffer overflow when processing crafted responses | CWE-119 |
| DNS request/response | binary | 127.0.0.1:5353 | DNS client interaction in PoC to trigger the server-side buffer overflow when processing crafted responses | CWE-119 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
20 May 2026 14:10Current
6Medium risk
Vulners AI Score6
CVSS 3.17.3
EPSS0.00024
SSVC